WO2001028273A1 - A method and system for protecting a user identifier - Google Patents

A method and system for protecting a user identifier Download PDF

Info

Publication number
WO2001028273A1
WO2001028273A1 PCT/FI2000/000873 FI0000873W WO0128273A1 WO 2001028273 A1 WO2001028273 A1 WO 2001028273A1 FI 0000873 W FI0000873 W FI 0000873W WO 0128273 A1 WO0128273 A1 WO 0128273A1
Authority
WO
WIPO (PCT)
Prior art keywords
service
user
identifier
user identifier
question
Prior art date
Application number
PCT/FI2000/000873
Other languages
French (fr)
Inventor
Tapio Lammi
Anssi Lindqvist
Timo Ruottinen
Original Assignee
Sonera Oyj
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Sonera Oyj filed Critical Sonera Oyj
Priority to AU77928/00A priority Critical patent/AU7792800A/en
Priority to DE60025377T priority patent/DE60025377T2/en
Priority to EP00967939A priority patent/EP1221272B1/en
Publication of WO2001028273A1 publication Critical patent/WO2001028273A1/en

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/02—Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0407—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the identity of one or more communicating identities is hidden

Definitions

  • the invention relates to telecommunication systems. More specifically, the invention relates to a method and a system for protecting the user identifier of a service user from the service provider in a mobile communication network, which service concerned is a content service utilizing the geographical information of the service user.
  • the network operators of the mobile communication networks have remarkably increased the number of their services and the co-operation with the serv- ice providers in the last few years.
  • the number of services is wide, and most of the services do not require any specific solutions of the operator, e.g. for guaranteeing the protection of identity of the user.
  • the operators are, however, willing to de- velop, e.g. their content services, and the meaning of the protection of identity is remarkably emphasized, because the services provided may include sensitive information comparable, e.g. with the geographical information.
  • people speak about a client which means the user of the service, and about a network operator or a telephone operator who offer network services, such as call transfer, call waiting, answering services, conference calls, etc.
  • service providers there are the content providers who are hereinafter referred to as service providers.
  • These interest groups provide content services, such as horoscopes, news services, timetables etc.
  • the appearing of a third party in between the client and the network operator may cause changes to the compiling of such identifiers that may insult the protection of data privacy of the client, i.e. the user of the serv- ice.
  • the content provider cannot be given such information that might insult the protection of identity of the client.
  • the home location register HLR there are several subscriber details permanently stored that are needed in the production of services regardless of the fact of where the subscriber each time is located. Such subscriber details are, e.g. the international mobile subscriber identity (IMSI, International Mobile Subscriber Identity) , the mobile station ISDN number (MSISDN) , additional services agreed by the subscriber, certain information of the location of that moment of the sub- scriber.
  • IMSI international mobile subscriber identity
  • MSISDN mobile station ISDN number
  • Prior-art technique represents also the servicing mobile location centre (SM C, Servicing Mobile Location Centre) , which is used in locating the position of that time of the user of the service.
  • MLC Mobile Location Centre
  • the subscriber details that are needed in production of the services are stored temporarily for the period the subscriber is located in the service area of the servicing mobile location centres of the VLR.
  • the VLR asks the HLR for these details.
  • the temporary mobile subscriber identity (TMSI, Temporary Mobile Subscriber Identity) is stored on the VLR. This is used in signaling in radio path instead of the IMSI because the permanent identity is wished to keep secret.
  • TMSI Temporary Mobile Subscriber Identity
  • LAI Location Area Identity
  • the authentication centre (AUC, Authentication Centre) is a database which includes subscriber details relating to the information security.
  • the AUC checks whether the subscriber is the one who he or she claims to be (IMSI/TMSI) .
  • AUC also includes the keys of the encryption used in the radio path.
  • the meaning of the wireless application protocol is not to be ignored as an alternative way of action when planning components managing the service request of the network operator.
  • the use of the wireless application protocol is becoming com- mon in solutions in which a connection is needed between portable terminal devices, such as mobile stations and the Internet applications, e.g. electronic mail, WWW (World Wide Web), news groups.
  • the wireless application protocol provides an architecture which adapts mobile phones, browser programs of mobile phones, and the WWW to work as a functional entity.
  • a problem has become the amount of information transmitted in the network between the client, network operator and the service provider. The operator has to be able to take care of the protection of identity of the client and to try to prevent information from ending up into the hands of those not concerned. At the same time, the operator has to be able to pick up from the information flow the essential information needed in order to be able to address the service to the right subscriber.
  • the objective of the present invention is to disclose a new kind of method and system that eliminates the disadvantages referred to above, or at least significantly alleviates them.
  • One specific objective of the invention is to disclose a method and a system that make it possible to protect the user identifier of a service user from the service provider in a mobile communication network. However, the protection is effected at such a level that the service provider gets the information sufficient enough for him or her to be able to address the service to the right subscriber.
  • a user identifier of a service user is protected from the service provider in a mobile communication network, such as the GSM network (Global System for Mobile Telecommunica- tions, GSM) .
  • GSM Global System for Mobile Telecommunica- tions
  • service provider refers to the provider of the content services in distinction from the telephone operator providing network services.
  • service refers to the content service in distinction from the network services. More specifically, the service is hereinafter used to refer to such a content service that utilizes the geographical information of the service user.
  • a service request containing the user identifier of the service user is sent from the terminal de- vice of the service user.
  • the user identifier means the way of identifying the user unambiguously used by the mobile station in use and known in itself, such as the MSISDN number (Mobile Subscriber Integrated Services Digital Network, MSISDN) , IMEI code (Interna- tional Mobile station Equipment Identity, IMEI) or the TMSI identity (Temporary Mobile Subscriber Identity, TMSI) .
  • MSISDN number Mobile Subscriber Integrated Services Digital Network
  • IMEI code Interna- tional Mobile station Equipment Identity
  • TMSI identity Temporary Mobile Subscriber Identity
  • the service request is directed to the service gateway which asks the encrypting party for the anonymous identifier corresponding to the user identifier in question.
  • the anonymous identifier in question is generated by means of an encryption device.
  • the user identifier and the corresponding anonymous identifier are stored on an identification database.
  • the anonymous identifier is sent to the service gateway in which the service request is modified in such a way that the user identifier is substituted with the anonymous identifier. After this, the modified service request is directed to the equipment of the service provider.
  • a geographical information request containing the anonymous identifier is sent from the equipment of the service provider to the location register, which re- trieves from the database a user identifier corresponding to the anonymous identifier in question.
  • the user identifier in question helps to find out the geographical information of the service user.
  • the geographical information and the corresponding anonymous identifier are sent to the equipment of the service provider.
  • the service response is generated based on the geographical information in question.
  • the service response containing the anonymous identifier is directed to the service gateway which retrieves from the identification database a user identifier corresponding to the anonymous identifier.
  • the service response is directed to the terminal device of the service user by means of the user identifier in question.
  • the user identifier and the corresponding anonymous identifier are eliminated from the identification database after a predetermined time. In an embodiment of the invention, the user identifier and the corresponding anonymous identifier are eliminated from the identification database after a predetermined number of inquiries . In an embodiment of the invention, the geographical information is found out by retrieving it from the SMLC centre (Servicing Mobile Location Centre, SMLC) of the mobile communication network.
  • SMLC centre Server Mobile Location Centre
  • the geo- graphical information is found out by retrieving it from the location database maintained by the location register.
  • the service gateway is arranged in conjunction with the SMS centre (Short Message Service, SMS) of the mobile communication network.
  • SMS Short Message Service
  • the service gateway is arranged in conjunction with the WAP gateway (Wireless Application Protocol, WAP) of the mobile communication network.
  • WAP gateway Wireless Application Protocol
  • the user identifier is the MSISDN number of the terminal device of the service user.
  • the mobile communication network is a GSM network.
  • the present invention provides the advantage that it makes it possible to protect the user identifier of the service user from the content provider.
  • This makes it possible to develop and/or provide such content services of a mobile communication network that utilize the geographical information of the service user because thanks to the invention, no sensitive information resulting from the combination of the iden- tity and the location of the service user is going to end up to the third party, i.e. the content provider.
  • Fig. 1 schematically represents one system of the invention
  • Fig. 2 schematically represents another system of the invention.
  • Fig. 1 is a flow chart illustrating one system of the invention.
  • the terminal device of the service user 11 has been connected to the mobile communication network 10, e.g. to a digital mobile network. From the aforementioned terminal device 11, a service request is sent to the mobile communication network 10.
  • the equipment of the service provider 12 which may be, e.g. a computer or some other suitable equipment or a software configuration.
  • the aforementioned equipment is used to maintain, e.g. the content services and address them to right clients.
  • the system also comprises a service gateway 14 which is connected to the mobile communication network 10 and which is arranged, e.g. in conjunction with the SMS centre or the WAP gateway.
  • the service gateway may be implemented as a separate entity.
  • the system comprises, in accordance with the invention, an encrypting device 13 in whose conjunction there is an identification database 13 arranged.
  • the system comprises, in accordance with the invention, a location register 15 in whose conjunction it is possible to arrange a location database 15 for maintaining the geographical information.
  • Fig. 2 is a flow chart illustrating another method of the invention.
  • a service request containing the user identi- bomb of the service user is sent.
  • the user identifier is the MSISDN number of the service user.
  • the mobile communication network directs the service request to the service gateway which at a step 23 sends to the encrypting device a request to give the anonymous identifier corresponding to the user identifier in question.
  • the aforementioned anonymous identifier is generated by means of the encrypting device, and the user identifier and the corresponding anonymous identifier are stored on the identification database at a step 24.
  • the anonymous identifier is sent to the service gateway which modifies the service request by substituting the user identifier with the anonymous identifier. After this, the modified service request is directed to the equipment of the service provider at a step 26.
  • a geographical information request containing the anonymous identifier is sent to the location register, which at the steps 28, 29 and 30 finds out the user identifier corresponding to the anonymous identifier in question by means of the identification database and/or the encrypting device.
  • the geographical information of the service user is found out at a step 31 using the location register.
  • the geographical information is found out, e.g. by retrieving it from the SMLC centre (Servicing Mobile Location Centre, SMLC) of the mobile communication network.
  • SMLC centre Server Mobile Location Centre
  • the geographical information and the anonymous identifier corresponding to it are sent to the equipment of the service provider.
  • the service response is generated based on the geographical information in question at a step 33.
  • the service response containing the anonymous identifier is directed to the service gateway, which retrieves the user identifier corresponding to the anonymous identifier from the identification database by repeating the steps.
  • the service response is directed to the terminal device of the service user based on the user identifier in question at steps 35-36.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Telephonic Communication Services (AREA)
  • Maintenance And Inspection Apparatuses For Elevators (AREA)
  • Polymers With Sulfur, Phosphorus Or Metals In The Main Chain (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Electrical Discharge Machining, Electrochemical Machining, And Combined Machining (AREA)
  • Chair Legs, Seat Parts, And Backrests (AREA)
  • Developing Agents For Electrophotography (AREA)
  • Credit Cards Or The Like (AREA)
  • Cash Registers Or Receiving Machines (AREA)
  • Vending Machines For Individual Products (AREA)

Abstract

The present invention relates to a method and a system for protecting the user identifier of a service user from the service provider in a mobile communication network, which service to be provided/used is a content service utilizing the geographical information of the service user. The system comprises a terminal device of the service user (11) for sending the service request to the service provider; equipment of the service provider (12) for generating the service response and sending it to the service user; and a mobile communication network (10) for transmitting the service request and the service response. In accordance with the invention, the system comprises an encrypting device (13) for generating the service-request-specific anonymous identifier corresponding to the user identifier; an identification database (13) for storing the user identifier and corresponding anonymous identifier; a service gateway (14) for retrieving the user identifier and the anonymous identifier corresponding to one another and for substituting the identifiers in question with one another in the service requests and service responses directed to the service gateway in question; and a location register (15) for retrieving the user identifier corresponding to the anonymous identifier as well as for retrieving the geographical information of the service user based on the user identifier in question.

Description

A METHOD AND SYSTEM FOR PROTECTING A USER IDENTIFIER
FIELD OF THE INVENTION
The invention relates to telecommunication systems. More specifically, the invention relates to a method and a system for protecting the user identifier of a service user from the service provider in a mobile communication network, which service concerned is a content service utilizing the geographical information of the service user.
PRIOR ART
The network operators of the mobile communication networks have remarkably increased the number of their services and the co-operation with the serv- ice providers in the last few years. The number of services is wide, and most of the services do not require any specific solutions of the operator, e.g. for guaranteeing the protection of identity of the user. Nowadays, the operators are, however, willing to de- velop, e.g. their content services, and the meaning of the protection of identity is remarkably emphasized, because the services provided may include sensitive information comparable, e.g. with the geographical information. Generally, people speak about a client, which means the user of the service, and about a network operator or a telephone operator who offer network services, such as call transfer, call waiting, answering services, conference calls, etc. Now as a third party, there are the content providers who are hereinafter referred to as service providers. These interest groups provide content services, such as horoscopes, news services, timetables etc. The appearing of a third party in between the client and the network operator may cause changes to the compiling of such identifiers that may insult the protection of data privacy of the client, i.e. the user of the serv- ice. According to the present legislation, the content provider cannot be given such information that might insult the protection of identity of the client.
For example in the GSM, there are several registers defined that are different databases. On the home location register HLR, there are the subscriber details permanently stored that are needed in the production of services regardless of the fact of where the subscriber each time is located. Such subscriber details are, e.g. the international mobile subscriber identity (IMSI, International Mobile Subscriber Identity) , the mobile station ISDN number (MSISDN) , additional services agreed by the subscriber, certain information of the location of that moment of the sub- scriber. Prior-art technique represents also the servicing mobile location centre (SM C, Servicing Mobile Location Centre) , which is used in locating the position of that time of the user of the service. Before, people used to talk about a mobile location centre (MLC, Mobile Location Centre) , but now that the position of that moment of the subscriber of the services has to be accurately located, people have changed to the use of this aforementioned SMLC.
On the visitor location register VLR, the subscriber details that are needed in production of the services are stored temporarily for the period the subscriber is located in the service area of the servicing mobile location centres of the VLR. When the mobile station is detected in the service area in ques- tion, the VLR asks the HLR for these details. In addition to the information in the HLR, the temporary mobile subscriber identity (TMSI, Temporary Mobile Subscriber Identity) is stored on the VLR. This is used in signaling in radio path instead of the IMSI because the permanent identity is wished to keep secret. In addition, in the VLR there is the location area iden- tity (LAI, Location Area Identity) of that time of the subscriber.
The authentication centre (AUC, Authentication Centre) is a database which includes subscriber details relating to the information security. The AUC checks whether the subscriber is the one who he or she claims to be (IMSI/TMSI) . AUC also includes the keys of the encryption used in the radio path.
In addition, as for prior art, the meaning of the wireless application protocol (WAP, Wireless Application Protocol) is not to be ignored as an alternative way of action when planning components managing the service request of the network operator. The use of the wireless application protocol is becoming com- mon in solutions in which a connection is needed between portable terminal devices, such as mobile stations and the Internet applications, e.g. electronic mail, WWW (World Wide Web), news groups. The wireless application protocol provides an architecture which adapts mobile phones, browser programs of mobile phones, and the WWW to work as a functional entity. A problem has become the amount of information transmitted in the network between the client, network operator and the service provider. The operator has to be able to take care of the protection of identity of the client and to try to prevent information from ending up into the hands of those not concerned. At the same time, the operator has to be able to pick up from the information flow the essential information needed in order to be able to address the service to the right subscriber.
OBJECTIVE OF THE INVENTION
The objective of the present invention is to disclose a new kind of method and system that eliminates the disadvantages referred to above, or at least significantly alleviates them. One specific objective of the invention is to disclose a method and a system that make it possible to protect the user identifier of a service user from the service provider in a mobile communication network. However, the protection is effected at such a level that the service provider gets the information sufficient enough for him or her to be able to address the service to the right subscriber.
BRIEF DESCRIPTION OF THE INVENTION
In the present invention, a user identifier of a service user is protected from the service provider in a mobile communication network, such as the GSM network (Global System for Mobile Telecommunica- tions, GSM) . The term "service provider" refers to the provider of the content services in distinction from the telephone operator providing network services. Correspondingly, the term "service" refers to the content service in distinction from the network services. More specifically, the service is hereinafter used to refer to such a content service that utilizes the geographical information of the service user.
A service request containing the user identifier of the service user is sent from the terminal de- vice of the service user. The user identifier means the way of identifying the user unambiguously used by the mobile station in use and known in itself, such as the MSISDN number (Mobile Subscriber Integrated Services Digital Network, MSISDN) , IMEI code (Interna- tional Mobile station Equipment Identity, IMEI) or the TMSI identity (Temporary Mobile Subscriber Identity, TMSI) . The service request in question is transmitted to the equipment of the service provider by means of which, a service response is generated. The service response is sent from the equipment of the service provider, and is transmitted to the terminal device of the service user.
In accordance with the invention, the service request is directed to the service gateway which asks the encrypting party for the anonymous identifier corresponding to the user identifier in question. The anonymous identifier in question is generated by means of an encryption device. The user identifier and the corresponding anonymous identifier are stored on an identification database. The anonymous identifier is sent to the service gateway in which the service request is modified in such a way that the user identifier is substituted with the anonymous identifier. After this, the modified service request is directed to the equipment of the service provider.
Further in accordance with the invention, a geographical information request containing the anonymous identifier is sent from the equipment of the service provider to the location register, which re- trieves from the database a user identifier corresponding to the anonymous identifier in question. The user identifier in question helps to find out the geographical information of the service user. The geographical information and the corresponding anonymous identifier are sent to the equipment of the service provider. The service response is generated based on the geographical information in question. The service response containing the anonymous identifier is directed to the service gateway which retrieves from the identification database a user identifier corresponding to the anonymous identifier. The service response is directed to the terminal device of the service user by means of the user identifier in question.
In an embodiment of the invention, the user identifier and the corresponding anonymous identifier are eliminated from the identification database after a predetermined time. In an embodiment of the invention, the user identifier and the corresponding anonymous identifier are eliminated from the identification database after a predetermined number of inquiries . In an embodiment of the invention, the geographical information is found out by retrieving it from the SMLC centre (Servicing Mobile Location Centre, SMLC) of the mobile communication network.
In an embodiment of the invention, the geo- graphical information is found out by retrieving it from the location database maintained by the location register.
In an embodiment of the invention, the service gateway is arranged in conjunction with the SMS centre (Short Message Service, SMS) of the mobile communication network.
In an embodiment of the invention, the service gateway is arranged in conjunction with the WAP gateway (Wireless Application Protocol, WAP) of the mobile communication network.
In an embodiment of the invention, the user identifier is the MSISDN number of the terminal device of the service user.
In an embodiment of the invention, the mobile communication network is a GSM network.
As compared with prior art the present invention provides the advantage that it makes it possible to protect the user identifier of the service user from the content provider. This on the other hand makes it possible to develop and/or provide such content services of a mobile communication network that utilize the geographical information of the service user because thanks to the invention, no sensitive information resulting from the combination of the iden- tity and the location of the service user is going to end up to the third party, i.e. the content provider. BRIEF DESCRIPTION OF THE DRAWINGS
In the following section, the invention will be described by the aid of the attached examples of its embodiments with reference to the attached drawing, in which
Fig. 1 schematically represents one system of the invention; and
Fig. 2 schematically represents another system of the invention.
DETAILED DESCRIPTION OF THE INVENTION
Fig. 1 is a flow chart illustrating one system of the invention. In the figure, the terminal device of the service user 11 has been connected to the mobile communication network 10, e.g. to a digital mobile network. From the aforementioned terminal device 11, a service request is sent to the mobile communication network 10. Connected to the aforementioned mobile communication network is also the equipment of the service provider 12, which may be, e.g. a computer or some other suitable equipment or a software configuration. The aforementioned equipment is used to maintain, e.g. the content services and address them to right clients. The system also comprises a service gateway 14 which is connected to the mobile communication network 10 and which is arranged, e.g. in conjunction with the SMS centre or the WAP gateway. Further, the service gateway may be implemented as a separate entity. In addition, the system comprises, in accordance with the invention, an encrypting device 13 in whose conjunction there is an identification database 13 arranged. In addition, the system comprises, in accordance with the invention, a location register 15 in whose conjunction it is possible to arrange a location database 15 for maintaining the geographical information. Fig. 2 is a flow chart illustrating another method of the invention. At a step 21, from the terminal device of the service user, such as the GSM telephone, a service request containing the user identi- fier of the service user is sent. In the exemplary case as illustrated in the figure, the user identifier is the MSISDN number of the service user. In accordance with the invention, at a step 22, the mobile communication network directs the service request to the service gateway which at a step 23 sends to the encrypting device a request to give the anonymous identifier corresponding to the user identifier in question. The aforementioned anonymous identifier is generated by means of the encrypting device, and the user identifier and the corresponding anonymous identifier are stored on the identification database at a step 24. At a step 25, the anonymous identifier is sent to the service gateway which modifies the service request by substituting the user identifier with the anonymous identifier. After this, the modified service request is directed to the equipment of the service provider at a step 26. At a step 27, from the equipment of the service provider, a geographical information request containing the anonymous identifier is sent to the location register, which at the steps 28, 29 and 30 finds out the user identifier corresponding to the anonymous identifier in question by means of the identification database and/or the encrypting device. By means of the user identifier in question, the geographical information of the service user is found out at a step 31 using the location register. The geographical information is found out, e.g. by retrieving it from the SMLC centre (Servicing Mobile Location Centre, SMLC) of the mobile communication network. Al- ternatively, e.g. in the location register, a location database is maintained from which the geographical information is retrieved, if necessary. At a step 32, the geographical information and the anonymous identifier corresponding to it are sent to the equipment of the service provider. The service response is generated based on the geographical information in question at a step 33. At a step 34, the service response containing the anonymous identifier is directed to the service gateway, which retrieves the user identifier corresponding to the anonymous identifier from the identification database by repeating the steps. The service response is directed to the terminal device of the service user based on the user identifier in question at steps 35-36.
The invention is not restricted merely to the examples of its embodiments, instead many variations are possible within the scope of the inventive idea.

Claims

1. A method for protecting the user identifier of a service user from the service provider in a mobile communication network, which service to be pro- vided/used in question is a content service utilizing the geographical information of the service user and which method comprises the steps of: sending the service request containing the user identifier of the service user from the terminal device of the service user, transmitting the service request in question to the equipment of the service provider, generating the service response using the equipment of the service provider, sending the service response from the equipment of the service provider, and transmitting the service response to the terminal device of the service user, charac t e r i sed in that the method further comprises the steps of: directing the service request to the service gateway, asking the encrypting party for the service- request-specific anonymous identifier corresponding to the user identifier in question, generating the anonymous identifier by means of the encryption device and storing the user identifier and the corresponding anonymous identifier on the identification database, sending the anonymous identifier to the service gateway, modifying the service request by substituting the user identifier with the anonymous identifier, directing the modified service request to the equipment of the service provider, sending a geographical information request containing the anonymous identifier from the equipment of the service provider to the location register, retrieving the user identifier corresponding to the anonymous identifier in question from the identification database to the location register, finding out the geographical information of the service user in question by means of the user identifier in question, sending the geographical information and the corresponding anonymous identifier to the equipment of the service provider, generating the service response based on the geographical information in question, directing the service response containing the anonymous identifier to the service gateway, retrieving the user identifier corresponding to the anonymous identifier from the identification database, and directing the service response to the terminal device of the service user by means of the user identifier in question.
2. A method as defined in claim 1, char ac t e ri se d in that the method further comprises the step of: eliminating the user identifier and the corresponding anonymous identifier from the identification database after a predetermined time.
3. A method as defined in claim 1, char - ac t eri s ed in that the method further comprises the step of : eliminating the user identifier and the corresponding anonymous identifier from the identification database after a predetermined number of inquir- ies .
4. A method as defined in any one of the preceding claims 1, 2, or 3, charac t e ri s ed in that the method further comprises the step of: finding out the location information by re- trieving it from the SMLC centre of the mobile communication network.
5. A method as defined in any one of the preceding claims 1, 2, or 3, charac t e r i sed in that the method further comprises the step of: finding out the geographical information by retrieving it from the location database maintained by the location register.
6. A system for protecting the user identifier of a service user from the service provider in a mobile communication network, which service to be provided/used is a content service utilizing the geographical information of the service user and which system comprises: a terminal device of the service user (11) for sending the service request to the service provider, which service request comprises the user identifier of the service user, equipment of the service provider (12) for generating the service response and sending it to the service user, and a mobile communication network (10) for transmitting the service request and the service response, c h a r a c t e r i s e d in that the system further comprises : an encrypting device (13) for generating the service-request-specific anonymous identifier corresponding to the user identifier, an identification database (13) for storing the user identifier and the corresponding anonymous identifier, a service gateway (14) for retrieving the user identifier and the anonymous identifier corresponding to one another and for substituting the identifiers in question with one another in the service requests and/or service responses directed to the service gateway in question, and a location register (15) for retrieving the user identifier corresponding to the anonymous identifier and for retrieving the geographical information of the service user based on the user identifier in question.
7. A system as defined in claim 6, char a c t e ri s e d in that the location register (15) comprises : means (15) for retrieving the geographical information from the SMLC centre of the mobile communication network (10) .
8. A system as defined claim 6, charac t e ri s ed in that the location register (15) com- prises: a location database (15) for maintaining the geographical information.
9. A system as defined in any one of the preceding claims 6, 7, or 8, charac t e ri s ed in that the service gateway (14) has been arranged in conjunction with the SMS centre of the mobile communication network (10) .
10. A system as defined in any one of the preceding claims 1, 2, or 3, charact e ri s ed in that the service gateway (14) has been arranged in conjunction with the WAP gateway of the mobile communication network (10) .
11. A system as defined in any one of the preceding claims 6, 7, 8, 9, or 10, charac t e r - i s e d in that the user identifier is the MSISDN number of the terminal device of the service user (11) .
12. A system as defined in any one of the preceding claims 6, 7, 8, 9, 10, or 11, charac t e r i s e d in that the mobile communication network (10) is a GSM network.
PCT/FI2000/000873 1999-10-11 2000-10-11 A method and system for protecting a user identifier WO2001028273A1 (en)

Priority Applications (3)

Application Number Priority Date Filing Date Title
AU77928/00A AU7792800A (en) 1999-10-11 2000-10-11 A method and system for protecting a user identifier
DE60025377T DE60025377T2 (en) 1999-10-11 2000-10-11 METHOD AND SYSTEM FOR PROTECTING A USER IDENTITY
EP00967939A EP1221272B1 (en) 1999-10-11 2000-10-11 A method and system for protecting a user identifier

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
FI19992185 1999-10-11
FI992185A FI107863B (en) 1999-10-11 1999-10-11 Procedures and systems for protecting a user identification

Publications (1)

Publication Number Publication Date
WO2001028273A1 true WO2001028273A1 (en) 2001-04-19

Family

ID=8555431

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/FI2000/000873 WO2001028273A1 (en) 1999-10-11 2000-10-11 A method and system for protecting a user identifier

Country Status (8)

Country Link
EP (1) EP1221272B1 (en)
AT (1) ATE315317T1 (en)
AU (1) AU7792800A (en)
DE (1) DE60025377T2 (en)
DK (1) DK1221272T3 (en)
ES (1) ES2255508T3 (en)
FI (1) FI107863B (en)
WO (1) WO2001028273A1 (en)

Cited By (32)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2001060083A2 (en) * 2000-02-07 2001-08-16 Profilium Inc. System and method for the delivery of targeted data over wireless networks
EP1126732A2 (en) * 2000-02-14 2001-08-22 Kabushiki Kaisha Toshiba Location dependent service providing method and system
WO2002047349A2 (en) * 2000-12-08 2002-06-13 Telefonaktiebolaget L M Ericsson (Publ) Secure location-based services system and method
WO2002065804A1 (en) * 2001-02-13 2002-08-22 Vodafone Group Plc Provision of location dependent services without revealing the user identity via a mobile telecommunications network
GB2375011A (en) * 2001-04-25 2002-10-30 Hewlett Packard Co Provision of location data to mobile computing or communications device
EP1293912A2 (en) * 2001-09-14 2003-03-19 Sony Computer Entertainment Inc. Method for issuing identification information
WO2003045099A1 (en) * 2001-11-21 2003-05-30 Nokia Corporation A telecommunications system and method for controlling privacy
WO2003065753A1 (en) * 2002-01-29 2003-08-07 Nokia Corporation Provision of location information
EP1389388A1 (en) * 2001-05-21 2004-02-18 Nokia Corporation Method for protecting privacy when using a bluetooth device
EP1411702A2 (en) * 2002-10-15 2004-04-21 Vodafone Group PLC Provisions of services via a mobile telecommunications network
EP1463360A1 (en) * 2003-03-28 2004-09-29 Alcatel A telecommunication method for a wireless network
US6823190B2 (en) 2002-12-03 2004-11-23 International Business Machines Corporation System and method to anonymously test for proximity of mobile users without revealing individual phase space coordinates
EP1487220A1 (en) * 2002-03-15 2004-12-15 Fujitsu Limited Position information providing method and position information providing system
WO2005002272A1 (en) * 2003-06-27 2005-01-06 Telefonaktiebolaget Lm Ericsson (Publ) A method and system for subscriber integrity in a mobile communications system
WO2006104435A1 (en) * 2005-04-01 2006-10-05 Telefonaktiebolaget Lm Ericsson (Publ) Anonymity in telephony communication systems
WO2009009509A1 (en) * 2007-07-07 2009-01-15 Qualcomm Incorporated Methods and systems for providing targeted information using identity masking in a wireless communications device
WO2011146216A2 (en) * 2010-05-19 2011-11-24 Yahoo! Inc. Method and system for providing driving directions
WO2012035495A1 (en) 2010-09-13 2012-03-22 Nokia Corporation Method and apparatus for providing communication with a service using a recipient identifier
US20140123323A1 (en) * 2012-10-31 2014-05-01 Elwha Llc Methods and systems for managing data
US20140123300A1 (en) * 2012-11-26 2014-05-01 Elwha Llc Methods and systems for managing services and device data
US20140122480A1 (en) * 2012-11-26 2014-05-01 Elwha Llc Methods and systems for managing one or more services and/or device data
US20140123308A1 (en) * 2012-11-26 2014-05-01 Elwha Llc Methods and systems for managing data and/or services for devices
US20140136422A1 (en) * 2012-10-30 2014-05-15 Elwha Llc Methods and systems for data services
US20140297398A1 (en) * 2013-04-02 2014-10-02 Google Inc. Measuring Search Lift Resulted by Online Advertisement
US9203912B2 (en) 2007-11-14 2015-12-01 Qualcomm Incorporated Method and system for message value calculation in a mobile environment
US9392074B2 (en) 2007-07-07 2016-07-12 Qualcomm Incorporated User profile generation architecture for mobile content-message targeting
US9391789B2 (en) 2007-12-14 2016-07-12 Qualcomm Incorporated Method and system for multi-level distribution information cache management in a mobile environment
EP2477428A4 (en) * 2009-10-10 2017-07-05 ZTE Corporation Method for anonymous communication, method for registration, method and system for transmitting and receiving information
US9749206B2 (en) 2012-10-30 2017-08-29 Elwha Llc Methods and systems for monitoring and/or managing device data
US10216957B2 (en) 2012-11-26 2019-02-26 Elwha Llc Methods and systems for managing data and/or services for devices
EP2930961B1 (en) * 2012-12-31 2020-06-10 Huawei Technologies Co., Ltd. Communication system, capability opening gateway and method for opening capability of wireless pipe
EP4109945A1 (en) * 2021-05-27 2022-12-28 Giesecke+Devrient Mobile Security GmbH Token, particularly otp, based authentication system and method

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH1019147A (en) * 1996-06-28 1998-01-23 Taga Seisakusho:Kk Valve device for compressor
EP0982958A2 (en) * 1998-08-28 2000-03-01 Lucent Technologies Inc. Method for protecting mobile anonymity

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH1019147A (en) * 1996-06-28 1998-01-23 Taga Seisakusho:Kk Valve device for compressor
EP0982958A2 (en) * 1998-08-28 2000-03-01 Lucent Technologies Inc. Method for protecting mobile anonymity

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
B. ASKWITH, M. MERABTI, Q. SHI, K. WHITELEY: "Achieving user privacy in mobile networks", 8 December 1997 (1997-12-08), pages 108 - 116, XP002023113 *

Cited By (81)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2001060083A3 (en) * 2000-02-07 2002-02-28 Profilium Inc System and method for the delivery of targeted data over wireless networks
WO2001060083A2 (en) * 2000-02-07 2001-08-16 Profilium Inc. System and method for the delivery of targeted data over wireless networks
EP1126732A2 (en) * 2000-02-14 2001-08-22 Kabushiki Kaisha Toshiba Location dependent service providing method and system
EP1126732A3 (en) * 2000-02-14 2002-08-21 Kabushiki Kaisha Toshiba Location dependent service providing method and system
US7023995B2 (en) 2000-12-08 2006-04-04 Telefonaktiebolaget L M Ericsson (Publ) Secure location-based services system and method
WO2002047349A2 (en) * 2000-12-08 2002-06-13 Telefonaktiebolaget L M Ericsson (Publ) Secure location-based services system and method
WO2002047349A3 (en) * 2000-12-08 2002-09-26 Ericsson Telefon Ab L M Secure location-based services system and method
WO2002065804A1 (en) * 2001-02-13 2002-08-22 Vodafone Group Plc Provision of location dependent services without revealing the user identity via a mobile telecommunications network
US7139556B2 (en) 2001-02-13 2006-11-21 Vodafone Group Plc. Provision of location dependent services without revealing the user identity via a mobile telecommunications network
GB2375011A (en) * 2001-04-25 2002-10-30 Hewlett Packard Co Provision of location data to mobile computing or communications device
EP1389388A1 (en) * 2001-05-21 2004-02-18 Nokia Corporation Method for protecting privacy when using a bluetooth device
EP1389388A4 (en) * 2001-05-21 2009-12-02 Nokia Corp Method for protecting privacy when using a bluetooth device
EP1293912A2 (en) * 2001-09-14 2003-03-19 Sony Computer Entertainment Inc. Method for issuing identification information
US7313702B2 (en) 2001-09-14 2007-12-25 Sony Computer Entertainment Inc. Method for issuing identification information
EP1293912A3 (en) * 2001-09-14 2006-04-12 Sony Computer Entertainment Inc. Method for issuing identification information
WO2003045099A1 (en) * 2001-11-21 2003-05-30 Nokia Corporation A telecommunications system and method for controlling privacy
CN1602645B (en) * 2001-11-21 2012-10-17 诺基亚西门子网络有限公司 Telecommunications system and method for controlling privacy
WO2003047297A1 (en) * 2001-11-21 2003-06-05 Nokia Corporation A telecommunications system and method for controlling privacy
US7242946B2 (en) 2001-11-21 2007-07-10 Nokia Corporation Telecommunications system and method for controlling privacy
CN1618251B (en) * 2002-01-29 2010-05-26 诺基亚公司 Provision of location information
US7321778B2 (en) 2002-01-29 2008-01-22 Nokia Corporation Provision of location information
US8019361B2 (en) 2002-01-29 2011-09-13 Nokia Corporation Provision of location information
WO2003065753A1 (en) * 2002-01-29 2003-08-07 Nokia Corporation Provision of location information
EP1487220A1 (en) * 2002-03-15 2004-12-15 Fujitsu Limited Position information providing method and position information providing system
EP1487220A4 (en) * 2002-03-15 2008-03-05 Fujitsu Ltd Position information providing method and position information providing system
EP1411702A3 (en) * 2002-10-15 2007-11-07 Vodafone Group PLC Provisions of services via a mobile telecommunications network
GB2394385B (en) * 2002-10-15 2006-05-10 Vodafone Plc Provision of services via a mobile telecommunications network
GB2394385A (en) * 2002-10-15 2004-04-21 Vodafone Plc Provision of services via a mobile telecommunications network
EP1411702A2 (en) * 2002-10-15 2004-04-21 Vodafone Group PLC Provisions of services via a mobile telecommunications network
US6823190B2 (en) 2002-12-03 2004-11-23 International Business Machines Corporation System and method to anonymously test for proximity of mobile users without revealing individual phase space coordinates
US7239878B2 (en) 2003-03-28 2007-07-03 Alcatel Telecommunication method for a wireless network
EP1463360A1 (en) * 2003-03-28 2004-09-29 Alcatel A telecommunication method for a wireless network
WO2005002272A1 (en) * 2003-06-27 2005-01-06 Telefonaktiebolaget Lm Ericsson (Publ) A method and system for subscriber integrity in a mobile communications system
WO2006104435A1 (en) * 2005-04-01 2006-10-05 Telefonaktiebolaget Lm Ericsson (Publ) Anonymity in telephony communication systems
KR101195681B1 (en) 2007-07-07 2012-10-30 콸콤 인코포레이티드 Methods and systems for providing targeted information using identity masking in a wireless communications device
US9485322B2 (en) 2007-07-07 2016-11-01 Qualcomm Incorporated Method and system for providing targeted information using profile attributes with variable confidence levels in a mobile environment
US9392074B2 (en) 2007-07-07 2016-07-12 Qualcomm Incorporated User profile generation architecture for mobile content-message targeting
US9398113B2 (en) 2007-07-07 2016-07-19 Qualcomm Incorporated Methods and systems for providing targeted information using identity masking in a wireless communications device
US9497286B2 (en) 2007-07-07 2016-11-15 Qualcomm Incorporated Method and system for providing targeted information based on a user profile in a mobile environment
WO2009009510A2 (en) * 2007-07-07 2009-01-15 Qualcomm Incorporated Method for transfer of information related to targeted content messages through a proxy server
WO2009009509A1 (en) * 2007-07-07 2009-01-15 Qualcomm Incorporated Methods and systems for providing targeted information using identity masking in a wireless communications device
KR101196053B1 (en) * 2007-07-07 2012-11-05 콸콤 인코포레이티드 Method for transfer of information related to targeted content messages through a proxy server
WO2009009510A3 (en) * 2007-07-07 2009-03-05 Qualcomm Inc Method for transfer of information related to targeted content messages through a proxy server
US9596317B2 (en) 2007-07-07 2017-03-14 Qualcomm Incorporated Method and system for delivery of targeted information based on a user profile in a mobile communication device
US9705998B2 (en) 2007-11-14 2017-07-11 Qualcomm Incorporated Method and system using keyword vectors and associated metrics for learning and prediction of user correlation of targeted content messages in a mobile environment
US9203912B2 (en) 2007-11-14 2015-12-01 Qualcomm Incorporated Method and system for message value calculation in a mobile environment
US9203911B2 (en) 2007-11-14 2015-12-01 Qualcomm Incorporated Method and system for using a cache miss state match indicator to determine user suitability of targeted content messages in a mobile environment
US9391789B2 (en) 2007-12-14 2016-07-12 Qualcomm Incorporated Method and system for multi-level distribution information cache management in a mobile environment
EP2477428A4 (en) * 2009-10-10 2017-07-05 ZTE Corporation Method for anonymous communication, method for registration, method and system for transmitting and receiving information
WO2011146216A3 (en) * 2010-05-19 2012-02-16 Yahoo! Inc. Method and system for providing driving directions
WO2011146216A2 (en) * 2010-05-19 2011-11-24 Yahoo! Inc. Method and system for providing driving directions
WO2012035495A1 (en) 2010-09-13 2012-03-22 Nokia Corporation Method and apparatus for providing communication with a service using a recipient identifier
EP2617175A4 (en) * 2010-09-13 2016-05-18 Nokia Technologies Oy Method and apparatus for providing communication with a service using a recipient identifier
US9749206B2 (en) 2012-10-30 2017-08-29 Elwha Llc Methods and systems for monitoring and/or managing device data
US20140123305A1 (en) * 2012-10-30 2014-05-01 Elwha Llc Methods and systems for managing data
US10361900B2 (en) 2012-10-30 2019-07-23 Elwha Llc Methods and systems for managing data
US20140136422A1 (en) * 2012-10-30 2014-05-15 Elwha Llc Methods and systems for data services
US10091325B2 (en) * 2012-10-30 2018-10-02 Elwha Llc Methods and systems for data services
US9825800B2 (en) 2012-10-30 2017-11-21 Elwha Llc Methods and systems for managing data
US9948492B2 (en) * 2012-10-30 2018-04-17 Elwha Llc Methods and systems for managing data
US9619497B2 (en) 2012-10-30 2017-04-11 Elwah LLC Methods and systems for managing one or more services and/or device data
US10069703B2 (en) 2012-10-31 2018-09-04 Elwha Llc Methods and systems for monitoring and/or managing device data
US20140122720A1 (en) * 2012-10-31 2014-05-01 Elwha Llc Methods and systems for managing device data
US9755884B2 (en) 2012-10-31 2017-09-05 Elwha Llc Methods and systems for managing data
US20140123307A1 (en) * 2012-10-31 2014-05-01 Elwha Llc Methods and systems for managing data
US20140122719A1 (en) * 2012-10-31 2014-05-01 Elwha Llc Methods and systems for managing device data
US9088450B2 (en) 2012-10-31 2015-07-21 Elwha Llc Methods and systems for data services
US9736004B2 (en) * 2012-10-31 2017-08-15 Elwha Llc Methods and systems for managing device data
US20140123323A1 (en) * 2012-10-31 2014-05-01 Elwha Llc Methods and systems for managing data
US20140123300A1 (en) * 2012-11-26 2014-05-01 Elwha Llc Methods and systems for managing services and device data
US20140123298A1 (en) * 2012-11-26 2014-05-01 Elwha Llc Methods and systems for managing services and device data
US9886458B2 (en) * 2012-11-26 2018-02-06 Elwha Llc Methods and systems for managing one or more services and/or device data
US9626503B2 (en) * 2012-11-26 2017-04-18 Elwha Llc Methods and systems for managing services and device data
US20140122480A1 (en) * 2012-11-26 2014-05-01 Elwha Llc Methods and systems for managing one or more services and/or device data
US20140123308A1 (en) * 2012-11-26 2014-05-01 Elwha Llc Methods and systems for managing data and/or services for devices
US10216957B2 (en) 2012-11-26 2019-02-26 Elwha Llc Methods and systems for managing data and/or services for devices
EP2930961B1 (en) * 2012-12-31 2020-06-10 Huawei Technologies Co., Ltd. Communication system, capability opening gateway and method for opening capability of wireless pipe
US9858589B2 (en) * 2013-04-02 2018-01-02 Google Llc Measuring search lift resulted by online advertisement
US20140297398A1 (en) * 2013-04-02 2014-10-02 Google Inc. Measuring Search Lift Resulted by Online Advertisement
EP4109945A1 (en) * 2021-05-27 2022-12-28 Giesecke+Devrient Mobile Security GmbH Token, particularly otp, based authentication system and method
US11968531B2 (en) 2021-05-27 2024-04-23 Giesecke+Devrient Mobile Security Gmbh Token, particularly OTP, based authentication system and method

Also Published As

Publication number Publication date
DE60025377D1 (en) 2006-03-30
FI19992185A (en) 2001-04-12
AU7792800A (en) 2001-04-23
EP1221272B1 (en) 2006-01-04
ATE315317T1 (en) 2006-02-15
DE60025377T2 (en) 2006-09-28
ES2255508T3 (en) 2006-07-01
FI107863B (en) 2001-10-15
DK1221272T3 (en) 2006-05-22
EP1221272A1 (en) 2002-07-10

Similar Documents

Publication Publication Date Title
EP1221272B1 (en) A method and system for protecting a user identifier
US7706791B2 (en) Method for telecommunication, identification module and computerized service unit
CN1102016C (en) Preventing misure of copied subscriber identity in mobile communication system
EP1437017B1 (en) Method and apparatus for processing messages
JP4030588B2 (en) Search for copied SIM card
KR100710124B1 (en) Method and arrangement for concealing true identity of user in communication system
EP1703760A2 (en) Method and system for providing a temporary subscriber identity to a roaming mobile communications device
US20070293192A9 (en) Identification of a terminal to a server
CN100473187C (en) Method and equipment for storing subscriber data
EP1873998A1 (en) Identifiers in a communication system
US7505786B2 (en) Method and mobile telecommunication network for detection of device information
KR20030066786A (en) Method of invoking privacy on telecommunications network
CN101563944A (en) IMSI handling system
US7974602B2 (en) Fraud detection techniques for wireless network operators
US6668166B1 (en) Apparatus and method for mobile authentication employing international mobile subscriber identity
JP4897864B2 (en) Protection against CLI spoofing of services in mobile networks
CN101335918B (en) Method for providing location information
US20040202292A1 (en) Mobile station tracking in a wireless telecommunication system
EP1478196B1 (en) Module and method for detecting at least one event in a cellular mobile telephony subscriber equipment, a computer program to carry out the method and a card and terminal with the module.
US20060172744A1 (en) Method and system for subscriber integrity in a mobile communications system
EP1176760A1 (en) Method of establishing access from a terminal to a server
KR100964246B1 (en) Lost mobile management system for out bound roaming and method thereof
KR101087557B1 (en) Per call interactive high speed packet data activation
Peng GSM and GPRS security
EP1488657B1 (en) A method for exchanging user-specific data from a mobile network to a service application of an external service provider using a unique application user id code

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AE AG AL AM AT AT AU AZ BA BB BG BR BY BZ CA CH CN CR CU CZ CZ DE DE DK DK DM DZ EE EE ES FI FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG SI SK SK SL TJ TM TR TT TZ UA UG US UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG

DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
121 Ep: the epo has been informed by wipo that ep was designated in this application
WWE Wipo information: entry into national phase

Ref document number: 2000967939

Country of ref document: EP

WWP Wipo information: published in national office

Ref document number: 2000967939

Country of ref document: EP

NENP Non-entry into the national phase

Ref country code: JP

WWG Wipo information: grant in national office

Ref document number: 2000967939

Country of ref document: EP